I am struggling to get my Yubikey OTP script to work on OpenVPN Access Server. The idea is that for a client a static-challenge directive is configured to ask the user to provide a Yubikey OTP token. The post_auth script get correctly called with the token and I am able to validate it. However I want to store the token_id of the Yubikey to link it to a user. The store of the property works (proplist_save['yubikey_token_id'] = yubikey_token_id) and I am able to see it using ./sacli UserPropGet. However on a second VPN connect I do not get this property back in the post_auth script:
proplist = authret.setdefault('proplist', {})
proplist.get('yubikey_token_id')
I have tried LDAP (which I want to use) and local users.
Any thoughts?
